Vendor dir should not be commited.

Since you are using the dep as a package manager, shouldn't you be grabbing those dependencies during docker build? Vendor should not be committed, we can do `dep ensure` or a similiar command to make sure all the deps are in sync.